Are you Snoopable?!

This blog post explains DNS cache snooping—how DNS caching works, how attackers can query publicly accessible resolvers (or misconfigured internal resolvers) to discover recently visited domains, and how to use Nmap's dns-cache-snoop.nse (with domain lists and a timed mode) to perform such checks. The author outlines the privacy and reconnaissance risks (e.g., enabling targeted phishing) and recommends testing from outside the network and focusing on specific high-value domains as mitigations.